Add unit test for contextual escape

This commit is contained in:
Kijin Sung 2025-03-19 11:23:56 +09:00
parent d7cf825a7d
commit 04a7734b2e
3 changed files with 75 additions and 0 deletions

View file

@ -0,0 +1,30 @@
@version(2)
<a href="javascript:alert('{{ $var }}')">
{{ $var }}
</p>
<p onclick="location.href = '{{ $var }}';">
<span style="font: {{ $var }}">
{{ $var }}
</span>
</p>
<script type="text/javascript">
function() {
const foo = '{{ $var }}';
const bar = '{{ $var|noescape }}';
const json = @json($var);
}
</script>
<style>
body {
background-image: url('{{ $var }}');
}
</style>
<ul class="test">
<li>{{ $var }}</li>
<li>{{ $var|noescape }}</li>
</ul>